Buffer Overflow in Bluetooth Module of Huawei Devices

CVE-2017-17285

Summary

The Bluetooth module in certain Huawei mobile phones exhibits a buffer overflow vulnerability due to inadequate input validation. An attacker, after successfully pairing with the device, could send specially crafted Bluetooth AVDTP/AVCTP messages that may trigger a buffer overflow. If exploited, this vulnerability can lead to unauthorized code execution on the affected device. Users of affected models should be vigilant and update their software to mitigate potential risks.

References